blob: 1407b798b5c69722d4658a5e7f337ba1b60fa925 [file] [log] [blame]
Andrew Geissler82c905d2020-04-13 13:39:40 -05001DESCRIPTION = "FreeRADIUS is an Internet authentication daemon, which implements the RADIUS \
2protocol, as defined in RFC 2865 (and others). It allows Network Access \
3Servers (NAS boxes) to perform authentication for dial-up users. There are \
4also RADIUS clients available for Web servers, firewalls, Unix logins, and \
5more. Using RADIUS allows authentication and authorization for a network to \
6be centralized, and minimizes the amount of re-configuration which has to be \
7done when adding or deleting new users."
8
9SUMMARY = "High-performance and highly configurable RADIUS server"
10HOMEPAGE = "http://www.freeradius.org/"
11SECTION = "System/Servers"
Andrew Geissler9aee5002022-03-30 16:27:02 +000012LICENSE = "GPL-2.0-only & LGPL-2.0-or-later"
Andrew Geissler82c905d2020-04-13 13:39:40 -050013LIC_FILES_CHKSUM = "file://LICENSE;md5=eb723b61539feef013de476e68b5c50a"
14DEPENDS = "openssl-native openssl libidn libtool libpcap libtalloc"
15
Andrew Geissler595f6302022-01-24 19:11:47 +000016SRC_URI = "git://github.com/FreeRADIUS/freeradius-server.git;branch=v3.0.x;lfs=0;;protocol=https \
Andrew Geissler82c905d2020-04-13 13:39:40 -050017 file://freeradius \
18 file://volatiles.58_radiusd \
19 file://freeradius-enble-user-in-conf.patch \
20 file://freeradius-configure.ac-allow-cross-compilation.patch \
21 file://freeradius-libtool-detection.patch \
22 file://freeradius-configure.ac-add-option-for-libcap.patch \
23 file://freeradius-avoid-searching-host-dirs.patch \
24 file://freeradius-rlm_python-add-PY_INC_DIR.patch \
25 file://freeradius-libtool-do-not-use-jlibtool.patch \
26 file://freeradius-fix-quoting-for-BUILT_WITH.patch \
27 file://freeradius-fix-error-for-expansion-of-macro.patch \
28 file://0001-rlm_mschap-Use-includedir-instead-of-hardcoding-usr-.patch \
Andrew Geissler748a4832020-07-24 16:24:21 -050029 file://0001-raddb-certs-Makefile-fix-the-existed-certificate-err.patch \
Andrew Geisslerbffdb3e2020-08-21 16:13:29 -050030 file://0001-raddb-certs-Makefile-fix-the-occasional-verification.patch \
Andrew Geisslerac970dd2021-02-12 15:32:45 -060031 file://0001-workaround-error-with-autoconf-2.7.patch \
Andrew Geissler82c905d2020-04-13 13:39:40 -050032 file://radiusd.service \
33 file://radiusd-volatiles.conf \
Andrew Geisslerf103a7f2021-05-07 16:09:40 -050034 file://check-openssl-cmds-in-script-bootstrap.patch \
Patrick Williams92b42cb2022-09-03 06:53:57 -050035 file://0001-version.c-don-t-print-build-flags.patch \
Andrew Geissler82c905d2020-04-13 13:39:40 -050036"
37
Andrew Geissler615f2f12022-07-15 14:00:58 -050038raddbdir="${sysconfdir}/${MLPREFIX}raddb"
39
Andrew Geisslere34f8962021-04-15 15:53:51 -050040SRCREV = "af428abda249b2279ba0582180985a9f6f4a144a"
Andrew Geissler82c905d2020-04-13 13:39:40 -050041
Patrick Williamsdb4c27e2022-08-05 08:10:29 -050042CVE_CHECK_IGNORE = "\
43 CVE-2002-0318 \
44 CVE-2011-4966 \
45"
46
Andrew Geissler82c905d2020-04-13 13:39:40 -050047PARALLEL_MAKE = ""
48
49S = "${WORKDIR}/git"
50
Patrick Williams213cb262021-08-07 19:21:33 -050051LDFLAGS:append:powerpc = " -latomic"
52LDFLAGS:append:mipsarch = " -latomic"
53LDFLAGS:append:armv5 = " -latomic"
Andrew Geissler82c905d2020-04-13 13:39:40 -050054
55EXTRA_OECONF = " --enable-strict-dependencies \
56 --with-docdir=${docdir}/freeradius-${PV} \
57 --with-openssl-includes=${STAGING_INCDIR} \
58 --with-openssl-libraries=${STAGING_LIBDIR} \
Andrew Geissler615f2f12022-07-15 14:00:58 -050059 --with-raddbdir=${raddbdir} \
Andrew Geissler82c905d2020-04-13 13:39:40 -050060 --without-rlm_ippool \
61 --without-rlm_cache_memcached \
62 --without-rlm_counter \
63 --without-rlm_couchbase \
64 --without-rlm_dbm \
65 --without-rlm_eap_tnc \
66 --without-rlm_eap_ikev2 \
67 --without-rlm_opendirectory \
68 --without-rlm_redis \
69 --without-rlm_rediswho \
70 --without-rlm_sql_db2 \
71 --without-rlm_sql_firebird \
72 --without-rlm_sql_freetds \
73 --without-rlm_sql_iodbc \
74 --without-rlm_sql_oracle \
75 --without-rlm_sql_sybase \
76 --without-rlm_sql_mongo \
77 --without-rlm_sqlhpwippool \
78 --without-rlm_securid \
79 --without-rlm_unbound \
80 --without-rlm_python \
81 ac_cv_path_PERL=${bindir}/perl \
82 ax_cv_cc_builtin_choose_expr=no \
83 ax_cv_cc_builtin_types_compatible_p=no \
84 ax_cv_cc_builtin_bswap64=no \
85 ax_cv_cc_bounded_attribute=no \
86"
87
88PACKAGECONFIG ??= "${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam', '', d)} \
89 pcre libcap \
90 openssl rlm-eap-fast rlm-eap-pwd \
91"
92
93PACKAGECONFIG[krb5] = "--with-rlm_krb5,--without-rlm_krb5,krb5"
94PACKAGECONFIG[pam] = "--with-rlm_pam,--without-rlm_pam,libpam"
95PACKAGECONFIG[libcap] = "--with-libcap,--without-libcap,libcap"
96PACKAGECONFIG[ldap] = "--with-rlm_ldap,--without-rlm_ldap,openldap"
97PACKAGECONFIG[mysql] = "--with-rlm_sql_mysql,--without-rlm_sql_mysql,mysql5"
98PACKAGECONFIG[sqlite] = "--with-rlm_sql_sqlite,--without-rlm_sql_sqlite,sqlite3"
99PACKAGECONFIG[unixodbc] = "--with-rlm_sql_unixodbc,--without-rlm_sql_unixodbc,unixodbc"
100PACKAGECONFIG[postgresql] = "--with-rlm_sql_postgresql,--without-rlm_sql_postgresql,postgresql"
101PACKAGECONFIG[pcre] = "--with-pcre,--without-pcre,libpcre"
102PACKAGECONFIG[perl] = "--with-perl=${STAGING_BINDIR_NATIVE}/perl-native/perl --with-rlm_perl,--without-rlm_perl,perl-native perl,perl"
103PACKAGECONFIG[python3] = "--with-rlm_python3 --with-rlm-python3-bin=${STAGING_BINDIR_NATIVE}/python3-native/python3 --with-rlm-python3-include-dir=${STAGING_INCDIR}/${PYTHON_DIR},--without-rlm_python3,python3-native python3"
104PACKAGECONFIG[rest] = "--with-rlm_rest,--without-rlm_rest,curl json-c"
105PACKAGECONFIG[ruby] = "--with-rlm_ruby,--without-rlm_ruby,ruby"
106PACKAGECONFIG[openssl] = "--with-openssl, --without-openssl"
107PACKAGECONFIG[rlm-eap-fast] = "--with-rlm_eap_fast, --without-rlm_eap_fast"
108PACKAGECONFIG[rlm-eap-pwd] = "--with-rlm_eap_pwd, --without-rlm_eap_pwd"
109
Andrew Geissler615f2f12022-07-15 14:00:58 -0500110inherit useradd autotools-brokensep update-rc.d systemd multilib_script multilib_header
111
112MULTILIB_SCRIPTS = "${PN}:${sbindir}/checkrad"
Andrew Geissler82c905d2020-04-13 13:39:40 -0500113
114# This is not a cpan or python based package, but it needs some definitions
115# from cpan-base and python3-dir bbclasses for building rlm_perl and rlm_python
116# correctly.
117inherit cpan-base python3-dir
118
119# The modules subdirs also need to be processed by autoreconf. Use autogen.sh
120# in order to handle the subdirs correctly.
121do_configure () {
122 ./autogen.sh
123
124 # the configure of rlm_perl needs this to get correct
125 # mod_cflags and mod_ldflags
126 if ${@bb.utils.contains('PACKAGECONFIG', 'perl', 'true', 'false', d)}; then
127 export PERL5LIB="${STAGING_LIBDIR}${PERL_OWN_DIR}/perl/${@get_perl_version(d)}"
128 fi
129
130 oe_runconf
131
132 # we don't need dhcpclient
133 sed -i -e 's/dhcpclient.mk//' ${S}/src/modules/proto_dhcp/all.mk
134}
135
136INITSCRIPT_NAME = "radiusd"
137
Patrick Williams213cb262021-08-07 19:21:33 -0500138SYSTEMD_SERVICE:${PN} = "radiusd.service"
Andrew Geissler82c905d2020-04-13 13:39:40 -0500139
140USERADD_PACKAGES = "${PN}"
Patrick Williams213cb262021-08-07 19:21:33 -0500141USERADD_PARAM:${PN} = "--system --no-create-home --shell /bin/false --user-group radiusd"
Andrew Geissler82c905d2020-04-13 13:39:40 -0500142
143do_install() {
144 rm -rf ${D}
145 mkdir -p ${D}/${sysconfdir}/logrotate.d
146 mkdir -p ${D}/${sysconfdir}/pam.d
147 mkdir -p ${D}/${sysconfdir}/init.d
148 mkdir -p ${D}/${localstatedir}/lib/radiusd
149 mkdir -p ${D}${sysconfdir}/default/volatiles
150
151 export LD_LIBRARY_PATH=${D}/${libdir}
152 oe_runmake install R=${D} INSTALLSTRIP=""
153
154 # remove unsupported config files
Andrew Geissler615f2f12022-07-15 14:00:58 -0500155 rm -f ${D}/${raddbdir}/experimental.conf
Andrew Geissler82c905d2020-04-13 13:39:40 -0500156
157 # remove scripts that required Perl(DBI)
158 rm -rf ${D}/${bindir}/radsqlrelay
159
160 cp -f ${WORKDIR}/freeradius ${D}/etc/init.d/radiusd
161 rm -f ${D}/${sbindir}/rc.radiusd
162 chmod +x ${D}/${sysconfdir}/init.d/radiusd
163 rm -rf ${D}/${localstatedir}/run/
164 rm -rf ${D}/${localstatedir}/log/
165 install -m 0644 ${WORKDIR}/volatiles.58_radiusd ${D}${sysconfdir}/default/volatiles/58_radiusd
166
Andrew Geissler615f2f12022-07-15 14:00:58 -0500167 chown -R radiusd:radiusd ${D}/${raddbdir}
Andrew Geissler82c905d2020-04-13 13:39:40 -0500168 chown -R radiusd:radiusd ${D}/${localstatedir}/lib/radiusd
169
170 # For systemd
171 if ${@bb.utils.contains('DISTRO_FEATURES', 'systemd', 'true', 'false', d)}; then
172 install -d ${D}${systemd_unitdir}/system
173 install -m 0644 ${WORKDIR}/radiusd.service ${D}${systemd_unitdir}/system
174 sed -i -e 's,@BASE_BINDIR@,${base_bindir},g' \
175 -e 's,@SBINDIR@,${sbindir},g' \
176 -e 's,@STATEDIR@,${localstatedir},g' \
177 -e 's,@SYSCONFDIR@,${sysconfdir},g' \
178 ${D}${systemd_unitdir}/system/radiusd.service
179
180 install -d ${D}${sysconfdir}/tmpfiles.d/
181 install -m 0644 ${WORKDIR}/radiusd-volatiles.conf ${D}${sysconfdir}/tmpfiles.d/radiusd.conf
182 fi
Andrew Geissler615f2f12022-07-15 14:00:58 -0500183 oe_multilib_header freeradius/autoconf.h
184 oe_multilib_header freeradius/missing.h
185 oe_multilib_header freeradius/radpaths.h
Andrew Geissler82c905d2020-04-13 13:39:40 -0500186}
187
188# This is only needed when we install/update on a running target.
189#
Patrick Williams213cb262021-08-07 19:21:33 -0500190pkg_postinst:${PN} () {
Andrew Geissler82c905d2020-04-13 13:39:40 -0500191 if [ -z "$D" ]; then
192 if command -v systemd-tmpfiles >/dev/null; then
193 # create /var/log/radius, /var/run/radiusd
194 systemd-tmpfiles --create ${sysconfdir}/tmpfiles.d/radiusd.conf
195 elif [ -e ${sysconfdir}/init.d/populate-volatile.sh ]; then
196 ${sysconfdir}/init.d/populate-volatile.sh update
197 fi
198
199 # Fix ownership for /etc/raddb/*, /var/lib/radiusd
Andrew Geissler615f2f12022-07-15 14:00:58 -0500200 chown -R radiusd:radiusd ${raddbdir}
Andrew Geissler82c905d2020-04-13 13:39:40 -0500201 chown -R radiusd:radiusd ${localstatedir}/lib/radiusd
202 fi
203}
204
205# We really need the symlink :(
Patrick Williams213cb262021-08-07 19:21:33 -0500206INSANE_SKIP:${PN} = "dev-so"
207INSANE_SKIP:${PN}-krb5 = "dev-so"
208INSANE_SKIP:${PN}-ldap = "dev-so"
209INSANE_SKIP:${PN}-mysql = "dev-so"
210INSANE_SKIP:${PN}-perl = "dev-so"
211INSANE_SKIP:${PN}-postgresql = "dev-so"
212INSANE_SKIP:${PN}-python = "dev-so"
213INSANE_SKIP:${PN}-unixodbc = "dev-so"
Andrew Geissler82c905d2020-04-13 13:39:40 -0500214
215PACKAGES =+ "${PN}-utils ${PN}-ldap ${PN}-krb5 ${PN}-perl \
216 ${PN}-python ${PN}-mysql ${PN}-postgresql ${PN}-unixodbc"
217
Patrick Williams213cb262021-08-07 19:21:33 -0500218FILES:${PN}-utils = "${bindir}/*"
Andrew Geissler82c905d2020-04-13 13:39:40 -0500219
Patrick Williams213cb262021-08-07 19:21:33 -0500220FILES:${PN}-ldap = "${libdir}/rlm_ldap.so* \
Andrew Geissler615f2f12022-07-15 14:00:58 -0500221 ${raddbdir}/mods-available/ldap \
Andrew Geissler82c905d2020-04-13 13:39:40 -0500222"
223
Patrick Williams213cb262021-08-07 19:21:33 -0500224FILES:${PN}-krb5 = "${libdir}/rlm_krb5.so* \
Andrew Geissler615f2f12022-07-15 14:00:58 -0500225 ${raddbdir}/mods-available/krb5 \
Andrew Geissler82c905d2020-04-13 13:39:40 -0500226"
227
Patrick Williams213cb262021-08-07 19:21:33 -0500228FILES:${PN}-perl = "${libdir}/rlm_perl.so* \
Andrew Geissler615f2f12022-07-15 14:00:58 -0500229 ${raddbdir}/mods-config/perl \
230 ${raddbdir}/mods-available/perl \
Andrew Geissler82c905d2020-04-13 13:39:40 -0500231"
232
Patrick Williams213cb262021-08-07 19:21:33 -0500233FILES:${PN}-python = "${libdir}/rlm_python3.so* \
Andrew Geissler615f2f12022-07-15 14:00:58 -0500234 ${raddbdir}/mods-config/python3 \
235 ${raddbdir}/mods-available/python3 \
Andrew Geissler82c905d2020-04-13 13:39:40 -0500236"
237
Patrick Williams213cb262021-08-07 19:21:33 -0500238FILES:${PN}-mysql = "${libdir}/rlm_sql_mysql.so* \
Andrew Geissler615f2f12022-07-15 14:00:58 -0500239 ${raddbdir}/mods-config/sql/*/mysql \
240 ${raddbdir}/mods-available/sql \
Andrew Geissler82c905d2020-04-13 13:39:40 -0500241"
242
Patrick Williams213cb262021-08-07 19:21:33 -0500243FILES:${PN}-postgresql = "${libdir}/rlm_sql_postgresql.so* \
Andrew Geissler615f2f12022-07-15 14:00:58 -0500244 ${raddbdir}/mods-config/sql/*/postgresql \
Andrew Geissler82c905d2020-04-13 13:39:40 -0500245"
246
Patrick Williams213cb262021-08-07 19:21:33 -0500247FILES:${PN}-unixodbc = "${libdir}/rlm_sql_unixodbc.so*"
Andrew Geissler82c905d2020-04-13 13:39:40 -0500248
Patrick Williams213cb262021-08-07 19:21:33 -0500249FILES:${PN} =+ "${libdir}/rlm_*.so* ${libdir}/proto_*so*"
Andrew Geissler82c905d2020-04-13 13:39:40 -0500250
Patrick Williams213cb262021-08-07 19:21:33 -0500251RDEPENDS:${PN} += "perl"
252RDEPENDS:${PN}-utils = "${PN} perl"
Andrew Geissler82c905d2020-04-13 13:39:40 -0500253
254CLEANBROKEN = "1"